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4. IRAQ: Six soldiers and one political party candidate targeted in a DAESH operation 
Source: Open source, 2018 04 08 


Summary: According to open source, on 2018 04 07, six lraqi soldiers and a political party candidate were 
wounded after a suicide bomber wearing an explosive belt blew himself up at al-Hal political party in Hit, Anbar 
governorate. The attack was carried out by 3 assailants. One of them managed to detonate the explosives while 2 
others were killed in exchange of fire with the army. 


5. SYRIA/IRAQ: Unpopularity of online campaign renewing allegiance to Al-Baghdadi 
Source: Open source, 2018 04 08 


Summary: According to open source, DAESH jihadists and sympathizers launched a campaign on social networks 
to call for the renewing of their’allegiance to DAESH leader Abu Bakr. Al-Baghdadi. This comes as the fourth 
anniversary of the announcement of the creation of DAESH approaches, On 2018 04 02, the Nasher agency, who 
publishes official DAESH messages, became the first media source to launch this initiative by posting a 
communiqué on social networks in Arabic and English. However, few groups linked to DAESH responded 
favourably to this campaian for the time being. Similarly, only a few jihadists have followed this directive on their 
social media accounts. 
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7. MALI: Explosives seized in Bamako 
Source: Open source. 


Summary: According to open source information, on 2018 04 06, Malian police authorities seized a significant 
amount of explosives from a private residence in Bamako, after being alerted by neighbours. The authorities 
arrested one individual and have identified a link to the Macina Liberation Front (MLF), a constituent group of the 
al-Qaida-affiliated Jamaat Nusrat al-Islam wal-Muslimeen (JNIM). The open source information indicates that the 
explosives were destined for use by an unidentified mining site. 
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INTRODUCTION Federal Government Canada Day Logo 
Canada Day 2018 festivities will take place in the National 

Capital Region (NCR), and in various cities across the 

country, from 2018 06 30 to 2018 07 01. M 


Scope: This assessment only covers the threat from 7S CA N À DA 1 51 


terrorism, defined as violence against persons or 

property for the purpose of achieving, a political, 

religious or ideological objective. This assessment Source: walkingeaglesnews.com 

does not include the threat of violence from local or 

trans-national armed conflict, espionage, civil unrest or organized crime, as this does not fall within ITAC’s 
mandate. Additionally, this assessment does not include the activities of groups or individuals who have 
actively protested against past international events and who may be motivated by various agendas, including 
environmental, anti-government or sectarian issues. 


ASSESSMENT 


Background 

The most significant Canada Day 2018 festivities will occur in the NCR. The Capital’s annual Canada Day 
celebrations are ‘based at three main sites in Ottawa and Gatineau: Parliament Hill, Major's Hill Park (Ottawa, 
Ontario) and the Canadian Museum of History (Gatineau, Quebec). Extremely large crowds are expected to gather 
early on Parliament Hill, with the official program beginning at 08:00, and will continue throughout the day, with the 
last scheduled event at 22:00. A calendar of events is published on the Canadian Heritage website. According to 
Canadian-Heritage, the: main Canada Day sites in Ottawa-Gatineau accommodate, on average, some 350,000 
individuals. 


ASSESSMENT NOTE Pe 
This report is based on classified and open source reporting up to 2018 06 14. 


DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. C a di 
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Her Excellency the Right Honourable Julie Payette, Governor General of Canada, the Right Honourable Justin 
Trudeau, Prime Minister of Canada, and the Honourable Melanie Joly, Minister of Canadian Heritage, are expected 
to attend the events and give addresses. As well, many other Ministers, Members of Parliament and 
representatives of the diplomatic community traditionally attend Canada Day festivities. 


Threats to Special Events such as Canada Day 


Attacks involving special events, symbolic holidays, tourist or secure areas in the past year include the following: 


* On 2018 04 08, German security authorities foiled a knife attack plot against the half-marathon in Berlin, 
Germany, according to media reporting. 


* On 2017 10 31, Uzbek-born US permanent resident Sayfullo Saipov drove a rental truck along a bike path in 
Manhattan, USA, intentionally hitting people before crashing. Eight people were killed and several others 
injured. He exited the truck, with two guns (later confirmed as paintball and pellet guns), reportedly yelling 
“Allahu Akbar,” after which he was shot and wounded, before being taken into custody. Saipov claims to 
have conducted the attack for DAESH and had been planning the attack for a year. He chose Halloween 
because more people would be on the streets. A handwritten note in Arabic demonstrated support for 
DAESH, and DAESH material was found on his computer 


+ On 2017 10 01, a mass shooting in Las Vegas, USA, killed 59 individuals, including four Canadians, and 
wounded over 500 more. While it has not been identified as terrorism, this attack demonstrates how a lone 
attacker can amass a large amount of casualties in a short period of time. 


* On 2017 08 17, in Barcelona, Spain, a terrorist drove a vehicle along the touristic Las Ramblas boulevard, 
striking pedestrians. This vehicle-ramming attack killed 14 people, including one Canadian, and injured more 
than 100,others»DAESH claimed responsibility, stating that its “soldier” carried out this attack. 


+ On 2017 06 08, seven people, including a Canadian, were killed when three men rammed their van into 
pedestrians on London Bridge, before proceeding to stab people in a nearby market area. The three 
attackers were killed by police. The following day, DAESH claimed responsibility for the attack by a 
“detachment of DAESH fighters.” 


+ On-2017 05-22, in Manchester, United Kingdom (UK), a suicide attacker detonated a person-borne 
improvised: explosive device (PBIED) in the box office foyer of the Manchester Arena as the audience was 
departing a concert. The bomb was packed with metal nuts, bolts and screws to amplify injuries. The 
explosion killed 22 people and injured 116 others. UK police identified 22-year-old Alaman Abedi, a UK 
citizen of Libyan origin, as the suicide bomber. DAESH claimed the attack the following day. 
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Terrorism Threat Environment in Canada 


Examples of terror-related incidents in Canada, and attacks by Canadians abroad, over the past year, include the 
following: 


* On 2017 09 30, Abdulahi Hasan Sharif, a 30-year-old man, drove through a roadblock and struck an 
Edmonton Police Service (EPS) officer outside of Edmonton's Commonwealth Stadium during a CFL game. 
Sharif exited the car-and repeatedly stabbed the officer with a knife before fleeing the scene. He then drove 
through downtown Edmonton, and attempted to strike pedestrians. He was charged with five counts of 
attempted murder, five counts of dangerous operation of a motor vehicle, one count of criminal flight causing 
bodily harm and one count of possession of a weapon for a dangerous purpose. 


* On 2017 06 21, Amor Ftouhi, a Canadian residing in Montréal, stabbed a police officer with a knife at the 
Bishop International Airport in Flint, Michigan, USA, and was subsequently. subdued and arrested. An FBI 
spokesperson stated that Ftouhi was motivated by “a hatred for the United States.” Ftouhi’s trial is to be held 
in Michigan, starting on 2018 07 30. 


+ On 2017 06 03, Rehab Dughmosh, a 32-year-old woman claiming to be a DAESH member, assaulted 
employees and customers with a golf club and a large knife at a Canadian Tire store in Scarborough, 
Ontario, before being arrested. Terrorism-related offenses were filed by the RCMP. At her court appearance 
on 2017 06 06, she pledged allegiance to DAESH leader Abu Bakr al-Baghdadi. In late-August 2017, it was 
revealed that, in April 2016, Dughmosh had attempted to travel to Syria to join DAESH but was intercepted in 
Turkey and returned to Canada. She was to stand trial on 2018 05 28. The trial is expected to last at least 
three weeks; no further information is available at this time. 


Individuals have been inspired to conduct attacks by propaganda released via various social media platforms by 
groups such as DAESH and-AQ. This messaging often targets Westerners and Western interests, and may 
suggest targets such as public venues and events, as well as recommend methods of attack. This messaging has 
been the impetus of many of the above-mentioned attacks in Canada. 
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Examples of recent propaganda released by terrorist organizations with references to Canada or the West include: 


» On 2018 05 21, the media arm of Syria-based, pro-AQ 
group Turkestan Islamic Party (TIP), released a video on 
social media featuring a Canadian with his face covered, 
Abu Mansour al-Muhajir, explaining why he had joined the 
jihad in Syria and urging other Western-based Muslims to 
move to Muslim countries. 


+ On 2018 05 03, a DAESH Telegram poster threatened random attacks in Western countries, with pictures 
showing an explosion next to the Marriott Hotel in Vancouver, BC. 


+ On 2018 04 22, DAESH official spokesman, Abu al-Hasan al-Muhajir, released an audio statement via media 
company al-Furqan on Telegram in which he noted DAESH’s success in terrorizing the West with attacks, 
saying it has managed to deprive the West of its feeling of security, and threatened more attacks. Al-Muhajir 
stresses that the DAESH priority is to fight the secular rulers of Arab and Muslim countries. He criticized the 
USA at length, ridiculing its assertions that it has defeated DAESH. 


+ On 2018 04 19, the DAESH-associated group “Muharir al-Ansar” distributed an English-language poster on 
Telegram that provided advice on lone-actor attacks using improvised explosive devices (IEDs), firearms, 
knives and vehicles. It described the most effective way to use each weapon and ideal targets for each. It 
suggested, for example, pressure cooker bombs for the IED.and an automatic rifle if the gun is to be used on 
crowds. 


+ On 2018 04 07, the pro-DAESH Misr al-Kinana published an article on Telegram urging Muslims in the West 
to carry out attacks in their own countries with guns, knives and vehicles and to spare no one, including 
toddlers and pregnant women. 


+ On 2018 04 03, the DAESH-linked media group “Constantinople Foundation” urged lone-actor jihadists in the 
West to attack soft targets including airports, universities, schools, parks and public areas. 


+ On 2018 02 02, a pro-AQ Telegram group released a statement threatening the USA for its decision to 
continue operating thé Guantanamo Day detention camp and threatened an attack similar to the “9/11 
Martyrdom operations:” The statement also mentions that leaders have advised mujahideen (fighters) to “hit 
America though all means available.” 
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e On 2018 01 30, a pro-DAESH Telegram channel urged its followers to migrate to the Islamic state, but if that 
was not possible, they should “answer the call” and conduct an attack locally. 


Terrorism Threat Levels 


ITAC assesses that a violent act of terrorism could occur in Canada. 
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ITAC assesses that a violent.act of terrorism is 


CRITICAL HIGHLY LIKELY. and 
COULD OCCUR IMMINENTLY: 
TACG-assessés4hat a violent act of terrorism is 
HIGH LIKELY 
m ITAC assessesthat.a violent act of terrorism 
MEDIUM . : se Yat avi of ter 
ITAC assesses that a violent act of térrorism is 
LOW POSSIBLE BUT UNLIKELY. 
VERY | OW ITAC assesses that a violent act of terrorism is 
MENT QT HIGHLY UNLIKELY. 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning 


HANDLING INSTRUCTIONS 


This document is the property of the Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived from various 
sources with information effective as of the date of publication. It is provided to your agency/department in confidence and may be 
further disseminatéd by your agency/department to those with appropriate security clearances and appropriate security systems to 
retain the information. It must not be reclassified or reused in any way, in whole or in part, without the consent of the originator. 


Any feedback should be directed via’ ¥en email to: 
Internal Users: ‘External Users: 


{THis-docurhent sonatiites a ‘record which may be Subject to mandatory exemption under the Access to Information Act or the Privacy 
Act. The: information or intelligence may also be protected by the provisions of the Canada Evidence Act. The information or 
intelligence must not bé ‘disclosed or used as, evidence without prior consultation with ITAC. 
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INTRODUCTION | Federal Government Canada Day Logo 


Canada Day 2018 festivities will take place in the National 
Capital Region (NCR), and in various cities across the 
country, from 2018 06 30 to 2018 07 01. 


Scope: This assessment only covers the threat | > CANADA 151 


from terrorism, defined as violence against persons 

or property for the purpose of achieving, a political, 

religious or ideological objective. This assessment Source: walkingeaglesnews.com į 

does not include the threat of violence from local or 

trans-national armed conflict, espionage, civil unrest or organized crime, as this does not fall within ITAC’s 
mandate. Additionally, this assessment does not include the activities of groups or individuals who have 
actively protested against past international events and who may be motivated by various agendas, including 
environmental, anti-government or sectarian issues. 


ASSESSMENT 


Background 


The most significant Canada Day 2018 festivities will occur in the NCR. The Capital’s annual Canada Day 
celebrations are based at three main sites in Ottawa and Gatineau: Parliament Hill, Major's Hill Park (Ottawa, 
Ontario) and the Canadian Museum of History (Gatineau, Quebec). Extremely large crowds are expected to gather 
early on Parliament Hill, with the official program beginning at 08:00, and will continue throughout the day, with the 
last scheduled event at 22:00. A calendar-of events is published on the Canadian Heritage website. According to 
Canadian Heritage, the main Canada Day sites in Ottawa-Gatineau accommodate, on average, some 350,000 
individuals. 


ASSESSMENT NOTE 
This report is based on open source reported informed, by intelligence up to 2018 06 14. 


‘DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. 
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Her Excellency the Right Honourable Julie Payette, Governor General of Canada, the Right Honourable Justin 
Trudeau, Prime Minister of Canada, and the Honourable Melanie Joly, Minister of Canadian Heritage, are expected 
to attend the events and give addresses. As well, many other Ministers, Members of Parliament and 
representatives of the diplomatic community traditionally attend Canada Day festivities. 


Threats to Special Events such as Canada Day 


~ . . ~ 


Canadian uniformed personnel face a specific, persistent terrorism threat, given the fact that they have been 
singled out as desirable targets in extremist propaganda and that their uniforms mark them indistinguishably as law 
enforcement and military personnel. 


Attacks involving special events, symbolic holidays, tourist or secure areas in the past year include the following: 


+ On 2018 04 08, German security authorities foiled-a knife attack plot against the half-marathon in Berlin, 
Germany, according to media reporting. 


+ On 2017 10 31, Uzbek-born US permanent resident Sayfullo Saipov drove a rental truck along a bike path in 
Manhattan, USA, intentionally hitting people before crashing. Eight people were killed and several others 
injured. He exited the truck, with two guns (later confirmed as paintball and pellet guns), reportedly yelling 
“Allahu Akbar,” after which he was shot and wounded, before being taken into custody. Saipov claims to 
have conducted the attack for DAESH and had been planning the attack for a year. He chose Halloween 
because more people would be on the streets. A handwritten note in Arabic demonstrated support for 
DAESH, and DAESH material was found on his computer. On 2017 1101, he was charged with one count of 
provision of material support and resources to a designated foreign terrorist organization and one count of 
violence and destruction of motor vehicles. 


* On 2017 10 01, a mass shooting in Las Vegas, USA, killed 59 individuals, including four Canadians, and 
wounded over 500 more. While it has not been identified as terrorism, this attack demonstrates how a lone 
attacker can amass a large amount of casualties in a short period of time. 


* On 2017 08 17, in Barcelona, Spain, a terrorist drove a vehicle along the touristic Las Ramblas boulevard, 
striking pedestrians. This vehicle-ramming attack killed 14 people, including one Canadian, and injured more 
than 100 others. DAESH claimed responsibility, stating that its “soldier” carried out this attack. 


+ On 2017 06.03, seven people, including a Canadian, were killed when three men rammed their van into 
pedestrians on London Bridge, before proceeding to stab people in a nearby market area. The three 
attackers were killed- by police. The following day, DAESH claimed responsibility for the attack by a 
“detachment of DAESH fighters.” 


On 2017 05 22, in Manchester, United Kingdom (UK), a suicide attacker detonated a person-borne 
improvised explosive device (PBIED) in the box office foyer of the Manchester Arena as the audience was 
departing a concert. The bomb was packed with metal nuts, bolts and screws to amplify injuries. The 
explosion killed 22 people and injured 116 others. UK police identified 22-year-old Alaman Abedi, a UK 
citizen of Libyan origin, as the suicide bomber. DAESH claimed the attack the following day. 
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For Canada Day 2017 in the NCR, the main pedestrian areas were blocked with temporary barriers 
such as fully-loaded dump trucks and garbage trucks, while access to Parliament Hill was only through gated 
screening tents that included mandatory baggage checks to restrict items such as umbrellas and camera selfie- 
sticks. ITAC notes that similar measures will be taken for Canada Day 2018. 


Terrorism Threat Environment in Canada 


Examples of terror-related incidents in Canada, and attacks by Canadians abroad, over the past year, include the 
following: 


+ On 2017 09 30, Abdulahi Hasan Sharif, a 30-year-old man, drove through a roadblock and struck an 
Edmonton Police Service (EPS) officer outside of Edmonton’s Commonwealth Stadium during a CFL game. 
Sharif exited the car and repeatedly stabbed the officer with a knife before fleeing the scene. He then drove 
through downtown Edmonton and attempted to strike pedestrians. He was charged with five counts of 
attempted murder, five counts of dangerous operation of a motor vehicle, one count of criminal flight causing 
bodily harm and one count of possession of a weapon for a dangerous purpose. A DAESH flag was found in 
the vehicle used to perpetrate the attack. Sharif’s last court appearance was on 2018 05 04 and his next 
court appearance is tentatively scheduled for 2019 10 15. , 


+ On 2017 06 21, Amor Ftouhi, a Canadian residing in Montréal, stabbed a police officer with a knife at the 
Bishop International Airport in Flint, Michigan, USA, and was subsequently subdued and arrested. An FBI 
spokesperson stated that Ftouhi was motivated by “a hatred for the United States.” Ftouhi’s trial is to be held 
in Michigan, starting on 2018.07 30. 


+ On 2017 06 03, Rehab Dughmosh, .a 32-year-old) woman claiming to be a DAESH member, assaulted 
employees and customers with a golf club and a large knife at a Canadian Tire store in Scarborough, 
Ontario, before being arrested. Terrorism-related offenses were filed by the RCMP. At her court appearance 
on 2017 06 06, she pledged allegiance to DAESH leader Abu Bakr al-Baghdadi. In late-August 2017, it was 
revealed that, in April 2016, Dughmosh had attempted-to travel to Syria to join DAESH but was intercepted in 
Turkey and returned to Canada. She was to stand trial on 2018 05 28. The trial is expected to last at least 
three weeks; no further information is available at this time. 


ITAC notes that individuals in Canada have travelled overseas to fight with DAESH. While many individuals have 
been successful in travel, others were frustrated in their plans. Although 


Individuals have been inspired to conduct attacks by propaganda released via various social media platforms by 
groups such as DAESH and AQ. This messaging often targets Westerners and Western interests, and may 
suggest targets such as public venues and events, as well as recommend methods of attack. This messaging has 
been the impetus of many of the above-mentioned attacks in Canada. 


Examples of recent propaganda released by terrorist organizations with references to Canada or the West include: 


» On 2018.05.21, the media arm of Syria-based, pro-AQ 
group Turkestan Islamic Party (TIP), released a video on 
social media featuring a Canadian with his face covered, 
Abu Mansour al-Muhajir, explaining why he had joined 
the, jihad_ in, Syria and urging -other Western-based 
Muslims to move to Muslim countries. 


+ On 2018.05 03;:@ DAESH. Telegram poster threatened 
random attacks. in Western countries, with pictures 
showing an explosion. next to the Marriott Hotel in 
Vancouver, BC. 
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e On 2018 04 22, DAESH official spokesman, Abu al-Hasan al-Muhajir, released an audio statement via media 
company al-Furqan on Telegram in which he noted DAESH’s success in terrorizing the West with attacks, 
saying it has managed to deprive the West of its feeling of security, and threatened more attacks. Al-Muhajir 
stresses that the DAESH priority is to fight the secular rulers of Arab and Muslim countries. He criticized the 
USA at length, ridiculing its assertions that it has defeated DAESH. 


+ On 2018 04 19, the DAESH-associated group “Muharir al-Ansar’ distributed an English-language poster on 
Telegram that provided advice on lone-actor attacks using improvised explosive devices (IEDs), firearms, 
knives and vehicles. It described the most effective way to use each weapon and ideal targets for each. It 
suggested, for example, pressure cooker bombs for the IED and an automatic rifle if the gun is to be used on 
crowds. 


* On 2018 04 07, the pro-DAESH Misr al-Kinana published an article on Telegram urging Muslims in the West 
to carry out attacks in their own countries with guns, knives and vehicles and to spare no one, including 
toddlers and pregnant women. 


* On 2018 04 03, the DAESH-linked media group “Constantinople Foundation” urged lone-actor jihadists in the 
West to attack soft targets including airports, universities, schools, parks and public areas. 


- On 2018 02 02, a pro-AQ Telegram group released a statement threatening the USA for its decision to 
continue operating the Guantanamo Day detention camp and threatened an attack similar to the “9/11 
Martyrdom operations.” The statement also mentions that leaders have advised mujahideen (fighters) to “hit 
America though all means available.” 


* On 2018 01 30, a pro-DAESH Telegram channel urged its followers to migrate to the Islamic state, but if that 
was not possible, they should “answer the call’ and conduct an attack locally. 


Other Domestic Groups: 


Terrorism Threat Levels 


ITAC assesses that a violent act of terrorism could occur in Canada. | 
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ITAC asse$ses that à violent act of terrorism is 


CRITICAL HIGHLY LIKELY and 
COULD OCCUR IMMINENTLY. 


ITAC assessés4hat a violent act of terrorism ts 


HIGH LIKELY 


ITAC acsescok 4h À nits 
nA ITAC assesses that a violent act of terrorism 
MEDIUM COULD OCCUR 


LOW POSSIBLE BUT UNLIKELY 
VERY LOW ITAC assesses that a violent act of terrorism is 
dis Y HIGHLY UNLIKELY. 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 


HANDLING INSTRUCTIONS 


This document is the property of the Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived from various 
sources, with information effective as of the date of publication. It is provided to your agency/department in confidence and may be 
further disseminated by, your agency/department to those with the need to know. It must not be reused in any way, in whole or in part, 
without the consent of the originator. 


Any feedback should bé directed via email to ITAC at 


) This document constitutes a record which may be subject to mandatory exemption under the Access to Information Act or the Privacy 
‘Act. The information or intelligence may! also be ‘protected by the provisions of the Canada Evidence Act. The information or 
intelligence must not be disclosed or used.as evidence without prior consultation with ITAC. 
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Embassy of the United States of America in Canada 
Independence Day Celebrations at Ambassador’s Residence,in 
Ottawa on 2018 07 04 
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INTRODUCTION Pe ES E A EEA AA EE A EEEE 
On 2018 07 04, Her Excellency Kelly Craft, United States (US) | ; : | 
Ambassador to Canada, will host the annual Fourth of July : US Ambassador's Residence 
US Independence Day celebrations at the official US diplomatic ~ “Lornado” Typical 4 July 
residence in Ottawa. Information about this popular and highly- Garden Party 


anticipated diplomatic social function and its basic itinerary is not yet 
available in the public domain, though the guest list is by invitation 
only, and not available to the public. | 


Scope: This assessment only covers the threat from 
terrorism, defined as violence against persons or property for 
the purpose of achieving a political, religious or ideological 
objective. This assessment does not include the threat of 
violence from local or trans-national armed conflict, 
espionage, civil unrest or organized crime, as this does not 
fall within ITAC’s mandate. Additionally, this assessment 
does not include the activities of groups or individuals who 
have actively protested against past international events 
and who may be motivated by various agendas, including 
environmental, anti-government or sectarian issues. 


Source: ca.usembassy.gov 


ASSESSMENT NOTE 
This report is based on classified and open | source réborting up to 2018 06 25. 


DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. Can a da 
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Background 


The 2018 annual Fourth of July Independence Day celebrations, “An Evening of 
Kentucky Hospitality: Red, White & Bourbon,” will be hosted by Ambassador Craft 
and her husband, Joseph Craft. Ambassador Craft is a former entrepreneur and 
philanthropist who began her tenure as ambassador to Canada on 2018 10 23. 
She is the first woman to be appointed to the post. 


The Fourth of July event itself will be held on the grounds of “Lornado,” the official 
US diplomatic residence, located at 500 Lisgar Drive, Rockcliffe Park, Ottawa, 
Ontario, from 7:00 pm to 10:00 pm. This event involves a secondary location—the 
grounds of the Canadian Aviation & Space Museum, 11 Aviation Parkway, 
Ottawa—where invitees can park vehicles and then be transported to and from 
Lornado by coaches, starting from 6:50 pm on 2017 07 04. Lornado’s rear Minto 
Place entrance will be reserved for persons with disabilities and for exiting only. All 
other guests, including media representatives, will enter via the Lisgar entrance. 
Drop off for guests arriving by taxi or driver will be on the corner of Lisgar Road 
and Buena Vista Road. 


Approximately 2,000 guests are expected to attend the event. 
Traditionally, guests include senior Canadian government officials at | 
the federal, provincial and municipal levels; Canadian military and law. ` 
enforcement officials; foreign diplomats; representatives’ of private 
sector companies; and other domestic and foreign dignitaries. 


While the residence itself will be closed to guests, the grounds. will 
have food, drinks and seating available in marquee tents. The official 
program normally begins with the US Marine Corps Guards 
presenting their Colours, performing a flag drill, singing of both 
national anthems and retirement of the Colours, followed by music 
from military and local bands. 


US Ambassador 
Kelly Craft 


Source: ca.usembassy.gov | 


2015 07 04, Lornado, 
US Marine Colour Party 


me À P 


Due to the high-profile nature of this event and its participants, the Source: ottawacitizen.com 


Government of Canada will provide additional security and 


emergency resources, Retired RCMP Sergeant Garth 
Hampson sings the national 
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Source: ottawaciti 
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Fourth of July Event Pick-up Drop-off Points 


Attacks involving special events, symbolic holidays, tourist or secure 
areas in the past year include the following: | 


Intersection Lisgar 
and Buena Vista Roads 
as eos LE d paR" 


Source: google.ca_maps 


Canadian Aviation 
& Space Museum 


On 2018 06 16, in Moscow, a Kyrgyzstani Muslim national rammed 
his taxi fans attending FIFA World Cup events, exited the vehicle 
and ran away before being arrested. At least seven people were 
injured. While not confirmed as terrorism, the investigation by 
Russian authorities is ongoing. 


kë 
Source: triposo.com | 


On 2018 04 08, German security authorities foiled a knife attack plot against the half-marathon event in 
Berlin, Germany, according to media reporting. 


On 2017 10 31, Uzbek-born US permanent resident Sayfullo Saipov drove a rental truck along a bike path in 
Manhattan, USA, intentionally hitting people before crashing. Eight people were killed and several others 
injured. He exited the truck, with two guns (later confirmed as paintball and pellet guns), reportedly yelling 
“Allahu Akbar,” after which he was shot and wounded before being taken into custody. Saipov claims to have 
conducted the attack for DAESH and had been planning the attack for a year. He chose Halloween because 
more people would be on the streets. A handwritten note in Arabic demonstrated support for DAESH, and 
DAESH material was found on his computer. On 2017 11 01, he was charged with one count of provision of 
material support and resources to a designated foreign terrorist organization and one count of violence and 
destruction of motor. vehicles. 


On 2017 10 01, a mass shooting in Las Vegas, USA, killed 59 individuals, including four Canadians, and 
wounded over 500 more. While it has not been identified as terrorism, this attack demonstrates how a lone 
attacker can amass a large amount of casualties in a short period of time. 


On 2017 08,17, in Barcelona, Spain, a terrorist drove a vehicle along the touristic Las Ramblas boulevard, 
striking pedestrians: This vehicle-ramming attack killed 14 people, including one Canadian, and injured more 
than 100 others. DAESH claimed responsibility, stating that its “soldier” carried out this attack. 


+ 
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+ On 2017 06 03, seven people, including one Canadian, were killed when three men rammed their van into 
pedestrians on London Bridge, before proceeding to stab people in a nearby market area. The three 
attackers were killed by police. The following day, DAESH claimed responsibility for the attack by a 
“detachment of DAESH fighters.” 


+ On 2017 05 22, in Manchester, United Kingdom (UK), a suicide attacker detonated a person-borne 
improvised explosive device (PBIED) in the box office foyer of the Manchester Arena as the audience was 
departing a concert. The bomb was packed with metal nuts, bolts and screws to amplify injuries. The 
explosion killed 22 people and injured 116 others. UK police identified 22-year-old Alaman Abedi, a UK 
citizen of Libyan origin, as the suicide bomber. DAESH claimed the attack the following day. 


Terrorism Threat Environment in the USA / Nexus to Canada 

The United States is a priority target for Islamist extremist groups, including DAESH, al-Qaida (AQ) and their 
affiliates. Therefore, US persons and US interests may constitute an attractive symbolic target for acts of terrorism, 
especially during the annual Independence Day celebrations. 


Extremist propaganda frequently and consistently targets the US, members of its military and police forces, its 
citizens and its assets. This persistent and voluminous extremist propaganda campaign against the USA has 
inspired individuals to conduct violent attacks within its borders. Recent inspired small-scale attacks within the 
USA, or against US interests or persons abroad, include the following: 


* On 2018 06 14, an off-site mailroom in Ottawa intercepted a death-threat letter from Quebec that contained a 
suspicious but harmless white powder, and addressed to the residence of Ambassador Craft. US and 
Canadian law enforcement are investigating. The expletive-filled letter, which contained threats to kill the 
ambassador if she did not resign, also made threatening comments against US President Donald Trump. 
Motivations behind the letter are unknown, so this incident may fall outside the scope of terrorism. 


* On 2017 06 21, Amor Ftouhi, a Canadian residing in Montréal, stabbed a police officer with a knife at the 
Bishop International Airport in Flint, Michigan, USA, and was, subsequently subdued and arrested. An FBI 
spokesperson stated that Ftouhi was motivated by “a hatred for the United States.” According to open 
sources, the USA and Canada have launched a joint terrorism investigation into this attack. Ftouhi’s trial is to 
be held in Michigan, starting on 2018 07 30. 


Terrorism Threat Environment in Canada 


Examples of terror-related incidents related to Canada over the past year, include the following: 


+ On 2017 09 30, Abdulahi Hasan Sharif, a 30-year-old man, drove through a roadblock and struck an 
Edmonton Police Service (EPS) officer outside of Edmonton's Commonwealth Stadium during a CFL game. 
Sharif exited the car and repeatedly stabbed the officer with a knife before fleeing the scene. He then drove 
through downtown Edmonton and attempted to strike pedestrians. He was charged with five counts of 
attempted murder, five counts of dangerous operation of a motor vehicle, one count of criminal flight causing 
bodily harm and one count of possession of a weapon for a dangerous purpose. 


* :On.2017 06 03, Rehab) Dughmosh, a 32-year-old woman wearing a bandana with the DAESH logo and 
shouting. “Allahu.Akhbar,” assaulted employees and customers with a golf club and a large knife at a 
Canadian Tire store in Scarborough, Ontario, before being arrested. Terrorism-related offenses were filed by 
the RCMP, At her court appearance on 2017 06 06, she pledged allegiance to DAESH leader Abu Bakr al- 
Baghdadi. In late-August 2017, it was revealed that, in April 2016, Dughmosh had attempted to travel to Syria 
to join DAESH but was intercepted in Turkey and returned to Canada. She was to stand trial on 2018 05 28. 
The trial is expected to last at least three weeks; no further information is available at this time. 
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Individuals have been inspired to conduct attacks by propaganda released via various social media platforms by 
groups such as DAESH and AQ. This messaging often targets Westerners and Western interests, and may 
suggest targets such as public venues and events, as well as recommend methods of attack. This messaging has 
been the impetus of many of the above-mentioned attacks in Canada. 


Examples of recent propaganda released by terrorist organizations with references to Canada or the West include: 


» On 2018 06 20, pro-DAESH group, "Ansar AlKhelafa Europe," 
produced and distributed on Telegram an incitement video 
promoting previous DAESH-inspired and coordinated attacks 
in Barcelona, Brussels, London and Paris. 


+ On 2018 06 16, DAESH-linked al-Taqwa Media Foundation 
urged lone-actor jihadists to carry out attacks in the West and 
in Russia during the FIFA World Cup in particular, and thus 
"double the joy" of Eid al-Fitr. 


+ On 2018 05 21, the media arm of Syria-based, pro-AQ group a a date uns 


Turkestan Islamic Party (TIP), released a video on social media featuring a Canadian with his face covered, 
Abu Mansour al-Muhajir, explaining why he had joined the jihad in Syria and urging other Western-based 
Muslims to move to Muslim countries. 


* On 2018 05 03, a DAESH Telegram poster thréatened fandom 9p] 


attacks in Western countries, with pictures showing an ` Poster threatening tower 
explosion at the intersection of West Hastings and Thurlow housing US Consulate, 
Streets, next to Manulife Place tower, which houses the US Vancouver 


Consulate on the 20th floor, in Vancouver, BC. , 


* On 2018 04 22, DAESH official spokesman, Abu al-Hasan 
al-Muhajir, released an audio statement via media company 
al-Furqan,on Telegram in which he noted DAESH’s success in Source: SITE 
terrorizing the West with attacks, saying it has managed to 
deprive the West of its.feeling of security, and threatened more 
attacks. Al-Muhajir stresses that the DAESH priority is to fight the secular rulers of Arab and Muslim 
countries.-He criticized the USA at length, ridiculing its assertions that it has defeated DAESH. 


* On 2018.04 19; the DAESH-associated group “Muharir al-Ansar” distributed an English-language poster on 
Telegram that provided advice on lone-actor attacks in the West using improvised explosive devices (IEDs), 
firearms, knives and vehicles. It described the most effective way to use each weapon and ideal targets for 
each. It suggested, for example, pressure cooker bombs for the IED and an automatic rifle if the gun is to be 
used on crowds. 
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* On 2018 04 07, the pro-DAESH Misr al-Kinana published an article on Telegram urging Muslims in the West 
to carry out attacks in their own countries with guns, knives and vehicles and to spare no one, including 
toddlers and pregnant women. 


* On 2018 04 03, the DAESH-linked media group “Constantinople Foundation” urged lone-actor jihadists in the 
West to attack soft targets including airports, universities, schools, parks and public areas. 


+ On 2018 02 02, a pro-AQ Telegram group released a statement threatening the USA for its decision to 
continue operating the Guantanamo Day detention camp and threatened an attack similar to the “9/11 
Martyrdom operations.” The statement also mentions that leaders have advised mujahedeen (fighters) to “hit 
America though all means available.” 


Other Domestic Groups: While various left-wing and right-wing groups in Canada espouse extreme views to 
support their objectives, 


Terrorism Threat Levels 
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ITAC assesses that a violent act of terrorism could occur in Canada. 
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THREAT LEVEL // DEFINITIONS mé Estavlisned Raised” # Lowered > Remains 
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ITAC assesses that a violént/act of terrorism is 


CRITICAL HIGHLY LIKELY. and 
COULD OCCUR IMMINENTLY. 
TACrassessésdnat a violent act of terrorism is 
HIGH LIKELY 
ps ITAC assesses tva vidiè of terrorist 
MEDIUM TAC assessesthata violent act of terrorism 


COULD OCCUR. 


ITAC assesses that a violent act of terrorism is 
LOW POSSIBLE BUT UNLIKELY 


ITAC assesses that a violent act of terrorism is 
HIGHLY UNLIKELY. 


ITAC uses both quantitative ana qualitative analysis in applying terrorism tnreat levels. 1 ne setting of tnreat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 


HANDLING INSTRUCTIONS 


This document is the property of the Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived from various 
sources with information effective as of the date of publication. It is provided to your agency/department in confidence and may be 
further disseminated by your agency/department to those with appropriate security clearances and appropriate security systems to 
retain the information. It must not be reclassified or reused in any way, in whole or in part, without the consent of the originator. 


Any feedback should be directed via email to: 
Internal Users: y 1177 External Users: 


l This document constitutes a ‘record whichimay Be Subject to mandatory exemption under the Access to Information Act or the Privacy 
Act. The: information or intelligence may also-be protected by the provisions of the Canada Evidence Act. The information or 
intelligence must not be disclosed or used as-evidence without prior consultation with ITAC. 
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Embassy of the United States of America in Canada 
Independence Day Celebrations at Ambassador’s Residence in 
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INTROBUCTION 


On 2018 07 04, Her Excellency Kelly Craft, United States 
(US) Ambassador to Canada, will host the annual Fourth of 
July US Independence Day celebrations at the official US 
diplomatic residence in Ottawa. Information about this 
popular and highly-anticipated diplomatic social function and 
its basic itinerary is not yet available in the public domain, 
though the guest list is by invitation only and is not available 
to the public. 


Scope: This assessment only covers the threat from 
terrorism, defined as violence against persons or property for 
the purpose of achieving a political, religious or ideological 
objective. This assessment does not include the threat of 
violence from local or trans-national armed conflict, 
espionage, civil unrest or organized crime, as this does not 
fall within ITAC’s mandate. Additionally, this assessment 
does not include the activities of groups or individuals who 
have actively protested against past international events and 
who may be motivated by various agendas, including 
environmental, anti-government or sectarian issues. 


ASSESSMENT NOTE 


This report is based on open source reporté ‘and Yéfétmed by intelligence up to 2018 06 25. 


: DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. 
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US Ambassador’s Residence “Lornado” 
Typical 4 July Garden Party 
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Source: ca.usembassy.gov 
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BACKGROUND 


The 2018 annual Fourth of July Independence Day celebrations, “An 
Evening of Kentucky Hospitality: Red, White & Bourbon,” will be hosted 
by Ambassador Craft and her husband, Joseph Craft. Ambassador Craft 
is a former entrepreneur and philanthropist who began her tenure as 
ambassador to Canada on 2018 10 23. She is the first woman to be 
appointed to the post. | 


The Fourth of July event itself will be held on the grounds of “Lornado,” 
the official US diplomatic residence, located at 500 Lisgar Drive, 
Rockcliffe Park, Ottawa, Ontario, from 7:00 pm to 10:00 pm. This event 
involves a secondary location—the grounds of the Canadian Aviation & 
Space Museum, 11 Aviation Parkway, Ottawa—where invitees can park 
vehicles and then be transported to and from Lornado by coaches, 
starting from 6:50 pm on 2017 0704. Lornado’s rear Minto Place 
entrance will be reserved for persons with disabilities and for exiting only. 
All other guests, including media representatives, will enter via the Lisgar 
entrance. Drop off for guests arriving by taxi or driver will be on the corner 
of Lisgar Road and Buena Vista Road. 


Approximately 2,000 guests are expected to attend the event. 
Traditionally, guests include senior Canadian government officials 
at the federal, provincial and municipal levels; Canadian military 
and law enforcement officials; foreign diplomats; representatives of 
private sector companies; and other domestic and foreign 
dignitaries. | 


While the residence itself will be closed to guests, the grounds will 
have food, drinks and seating available in marquee tents. The 
official program normally begins with the US Marine Corps Guards 
presenting their Colours, performing a flag drill, singing of both 
national anthems and retirement of the Colours, followed by music 
from military and local bands. 


Due to the high-profile nature of this event and its participants, the 
Government of Canada will provide additional security and 
emergency resources 


Threëtsto Special Events such as US Independence Day 
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US Ambassador Kelly Craft 
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Fourth of July Event Pick-up Drop-off Points 


Mr ee M de ed 
Intersection Lisgar and Buena Vista 
Roads ; 


Source: google.ca_maps 


Canadian Aviation & Space Museum 


Attacks involving special events, symbolic holidays, tourist or 


. à R Source: triposo.com 
secure areas in the past year include the following. p 


* On 2018 06 16, in Moscow, a Kyrgyzstani Muslim national rammed his taxi into fans attending FIFA World 
Cup events, exited the vehicle and ran away before being arrested. At least seven people were injured. While 
not confirmed as terrorism, the investigation by Russian authorities is ongoing. 


+ On 2018 04 08, German security authorities foiled a knife attack plot against the half-marathon event in 
Berlin, Germany, according to media reporting. 


* On 2017 10 31, Uzbek-born US permanent resident Sayfullo Saipov drove a rental truck along a bike path in 
Manhattan, USA, intentionally hitting people before crashing. Eight people were killed and several others 
injured. He exited the truck, with two guns (later confirmed as paintball and pellet guns), reportedly yelling 
“Allahu Akbar,” after which he was shot and wounded before being taken into custody. Saipov claims to have 
conducted the attack for DAESH and had been planning the attack for a year. He chose Halloween because 
more people would be on the streets. A handwritten note in Arabic demonstrated support for DAESH, and 
DAESH material was found on his computer. On 2017 11 01, he was charged with one count of provision of 
material support and resources to a designated foreign terrorist organization and one count of violence and 
destruction of motor vehicles. 


» : On 2017 10 01, a mass shooting in Las Vegas, USA, killed 59 individuals, including four Canadians, and 
wounded over 500 more. While it has not been identified as terrorism, this attack demonstrates how a lone 
attacker can-amass.a large amount of casualties in a short period of time. 


» On 2017 08 17, in Barcelona, Spain, a terrorist drove a vehicle along the touristic Las Ramblas boulevard, 
striking pedestrians. This vehicle-ramming attack killed 14 people, including one Canadian, and injured more 
than 100 others. DAESH'claimed responsibility, stating that its “soldier” carried out this attack. 


+ On2017 06.03, seven people, including one Canadian, were killed when three men rammed their van into 
pedestrians on London Bridge, before proceeding to stab people in a nearby market area. The three 
attackers were killed by police. The following day, DAESH claimed responsibility for the attack by a 
“detachment of DAESH fighters.” 
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* On 2017 05 22, in Manchester, United Kingdom (UK), a suicide attacker. detonated a person-borne 
improvised explosive device (PBIED) in the box office foyer of the Manchester Arena as the audience was 
departing a concert. The bomb was packed with metal nuts, bolts and screws to amplify injuries. The 
explosion killed 22 people and injured 116 others. UK police identified 22-year-old Alaman Abedi, a UK 
citizen of Libyan origin, as the suicide bomber. DAESH claimed the attack the following day. 


Terrorism Threat Environment in the USA / Nexus to Canada 


The United States is a priority target for Islamist extremist groups, including DAESH, al-Qaida (AQ) and their 
affiliates. Therefore, US persons and US interests may constitute an attractive symbolic target for acts of terrorism, 
especially during the annual Independence Day celebrations. 


Extremist propaganda frequently and consistently targets the US, members of its military and police forces, its 
citizens and its assets. This persistent and voluminous extremist propaganda campaign against the USA has 
inspired individuals to conduct violent attacks within its borders. Recent inspired small-scale attacks within the 
USA, or against US interests or persons abroad, include the following: 


* On 2018 06 14, an off-site mailroom in Ottawa intercepted a death-threat letter from Quebec that contained a 
suspicious but harmless white powder, and addressed to the residence of Ambassador Craft. US and 
Canadian law enforcement are investigating. The expletive-filled letter, which contained threats to kill the 
ambassador if she did not resign, also made threatening comments against US President Donald Trump. 
Motivations behind the letter are unknown, so this incident may fall outside the scope of terrorism. 


* On 2017 06 21, Amor Ftouhi, a Canadian residing in Montréal, stabbed a police officer with a knife at the 
Bishop International Airport in Flint, Michigan, USA, and was subsequently subdued and arrested. An FBI 
spokesperson stated that Ftouhi.was motivated by “a hatred for the United States.” According to open 
sources, the USA and Canada have launched a joint terrorism investigation into this attack. Ftouhi’s trial is to 
be held in Michigan, starting on 2018 07 30. 


Terrorism Threat Environment in Canada 


Examples of terror-related incidents related to Canada over the past year, include the following: 


* On 2017 09 30, Abdulahi Hasan Sharif, a 30-year-old man, drove through a roadblock and struck an 
Edmonton Police Service (EPS) officer outside of Edmonton’s Commonwealth Stadium during a CFL game. 
Sharif exited the car and repeatedly stabbed the officer with a knife before fleeing the scene. He then drove 
through downtown Edmonton and attempted to strike pedestrians. He was charged with five counts of 
attempted murder, five counts of dangerous operation of a motor vehicle, one count of criminal flight causing 
bodily harm and one count of possession of a weapon for a dangerous purpose. A DAESH flag was found in 
the vehicle used to perpetrate the attack. Sharif's last court appearance was on 2018 05 04 and his next 
court appearance is tentatively scheduled for 2019 10 15. 


* On 2017 06 03, Rehab Dughmosh, a 32-year-old woman wearing a bandana with the DAESH logo and 
shouting “Allahu Akhbar,” assaulted employees and customers with a golf club and a large knife at a 
Canadian Tire store in Scarborough, Ontario, before being arrested. Terrorism-related offenses were filed by 
the RCMP. At hercourt appearance on 2017 06 06, she pledged allegiance to DAESH leader Abu Bakr al- 
Baghdadi In late-August 2017, it was revealed that, in April 2016, Dughmosh had attempted to travel to Syria 
to join DAESH but was intercepted in Turkey and returned to Canada. She was to stand trial on 2018 05 28. 
The trial.is expected to last atleast three weeks; no further information is available at this time. 
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Individuals have been inspired to conduct attacks by propaganda released via various social media platforms by 
groups such as DAESH and AQ. This messaging often targets Westerners and Western interests, and may 
suggest targets such as public venues and events, as well as recommend methods of attack. This messaging has 
been the impetus of many of the above-mentioned attacks in Canada. 


Examples of recent propaganda released by terrorist organizations with references to Canada or the West include: 


+ On 2018 06 20, pro-DAESH group, "Ansar AlKhelafa Europe," 
produced and distributed on Telegram an incitement video 
promoting previous DAESH-inspired and coordinated attacks in 
Barcelona, Brussels, London and Paris. 


* On 2018 06 16, DAESH-linked al-Taqwa Media Foundation urged 
lone-actor jihadists to carry out attacks in the West and in Russia 
during the FIFA World Cup in particular, and thus "double the joy" 
of Eid al-Fitr. 


Source: 2018 06 20 MEMRI 
+ On 2018 05 21, the media arm of Syria-based, pro-AQ group 
Turkestan Islamic Party (TIP), released a video on social media featuring a Canadian with his face covered, 
Abu Mansour al-Muhajir, explaining why he had joined the jihad in Syria and urging other Western-based 
Muslims to move to Muslim countries. 


On 2018 05 03, a DAESH Telegram poster threatened random ; : 
attacks in Western countries, with pictures showing an explosion Poster threatening tower housing 
at the intersection of West Hastings and Thurlow Streets, next to US Consulate, Vancouver 
Manulife Place tower, which houses the US Consulate on the 20th a f 
floor, in Vancouver, BC, 


* On 2018 04 22, DAESH official spokesman, Abu al-Hasan al- 
Muhajir, released an audio statément via media company al- 
Furqan on Telegram in which he noted DAESH’s success in 
terrorizing the West with attacks, saying it has managed to 
deprive the West of its feeling of security, and threatened more 
attacks. Al-Muhajir stresses that the DAESH priority is to fight the 
secular rulers of Arab and Muslim countries. He criticized the USA 
at length, ridiculing its assertions that it has defeated DAESH. Source: SITE 
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* On 2018 04 19, the DAESH-associated group “Muharir al-Ansar” distributed an English-language poster on 
Telegram that provided advice on lone-actor attacks in the West using improvised explosive devices (IEDs), 
firearms, knives and vehicles. It described the most effective way to use each weapon and ideal targets for 
each. It suggested, for example, pressure cooker bombs for the IED and an automatic rifle if the gun is to be 
used on crowds. 


* On 2018 04 07, the pro-DAESH Misr al-Kinana published an article on Telegram urging Muslims in the West 
to carry out attacks in their own countries with guns, knives and vehicles and to spare no one, including 
toddlers and pregnant women. 


+ On 2018 04 03, the DAESH-linked media group “Constantinople Foundation” urged lone-actor jihadists in the 
West to.attack soft targets including airports, universities, schools, parks and public areas 


+. On 2018 02.02; a pro-AQ Telegram group released a statement threatening the USA for its decision to 
continue operating the Guantanamo, Day detention camp and threatened an attack similar to the “9/11 
Martyrdom operations.” The,statement also mentions that leaders have advised mujahedeen (fighters) to “hit 
America though all means available.” 


Other Domestic Groups: While various left-wing and right-wing groups in Canada espouse extreme views to 
support their objectives, 
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Terrorism Threat Levels 


3103(18/09) 


ITAC assesses that a violent act of terrorism could occur in Canada. 
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ITAC assesses that violent-act of terrorism is 


CRITICAL HIGHLY LIKELY and 


COULD OCCUR IMMINENTLY, 
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HIGH LIKELY 
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MEDIUM COULD OCCUR 


LOW POSSIBLE BUT UNLIKELY 


sésdhat a violent act of terrorism is 


TAC assesses4hat a violent act of terrorism 


TAC assesses that a violent act of terrorism is 


ITAC assesses that a violent act of terrorism is 


LOW HIGHLY UNLIKELY. 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 
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HANDLING INSTRUCTIONS 
This document is ‘the. property of the, Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived 


from various sources with information-effective as of the date of publication. It is provided to your agency/department in 
confidence and may be further disseminated by-your agency/department to those with the need to know. It must not be 


‘reused i invany way, | in.whole or in part; without the consent of the originator. 


Any feedback should be directed via email to ITAC at 


This document constitutes: a record which may be subject to mandatory exemption under the Access to Information Act 
or the Privacy Act. Thé information or. intelligence may also be protected by the provisions of the Canada Evidence Act. 
The information or intelligence: must notbe disclosed or used as evidence without prior consultation with ITAC. 
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THE NATIONAL\TERRORISM THREAT LEVEL FOR CANADA 


ARE fui S 


SCOPE 


KEY JUDGEMENTS 

«+ The greatest terrorism threat to Canada remains domestic 
extremists who have been inspired or incited online by Sunni 
Islamist terrorist groups such as DAESH or al-Qaida (AQ). 


* A future terrorist attack in Canada is likely to be a simple attack 
using unsophisticated methods against a soft target. 


+ Despite a decrease in terror attacks ‘in. Canada and other 
Western countries, the intent and capability to conduct violent 
acts of terrorism persists. 


+ Other forms of extremism exist in Canada! While there is no 
information revealing intent by these,-actors to attack Canada, 


ASSESSMENT NOTE 


-= = DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. 
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Methods that have become synonymous with terrorism are increasingly being used by individuals conducting 
violent attacks, representing a challenge for security and intelligence officials as the specific threat they pose can 
be misunderstood. 


Uniformed personnel in Canada continue to be singled out as targets for attacks by Islamist extremists as seen in 
attacks both domestically and abroad. , 


FAR-RIGHT/ F- 


: The greatest terrorism threat to Canada continues to be Canada-based groups or individuals affiliated with 
i violent Sunni Islamist extremist ideologies propagated by groups such as DAESH and AQ and their affiliates 
who continue to express intent and/or demonstrate capability to carry out a violent act of terrorism in Canada. 
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Source: Al Jazeera 


According to open sources, on 2018 08 
22, DAESH’s media outlet al-Furqan 
_ “Foundation released a recording of a 
“speech. delivered by overall leader Abu 
Bakr al-Baghdadi. Entitled "Give Glad 
Tidings to the Patient," the recording - 
Travel abroad his first in almost a year - and 
encouraged DAESH supporters in the 
West to follow the path of those who 
supported the group in Canada and 
Europe, and to continue to carry out 
bombings, shootings and vehicular 
strikes. 
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_ in a DAESH 
statement was in September 2014 by 
Travel to Canadá then DAESH spokesman Abu 
Muhammed al-Adnani, a month before 
the October 2014 St-Jean-sur- 
Richelieu vehicle ramming and 
Parliament Hill firearms attacks. 
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Facilitation and recruitment 


Online incitement 


Training 


Online research 
Extremists in Canada continue to access online propaganda that depicts attack methods, such as bladed- 
weapon or vehicular attacks, and other suggested methods. 


| 
2. SHIA GROUPS 


Shia terrorist groups, such as Lebanese Hizballah (LH), use Canada primarily as a facilitation hub. 
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Hizballah has extensive networks and areas of influence in countries such as Lebanon, Syria and the 
Triborder area in South Amercia. Hizballah also has an advanced and demonstrated capability to conduct 
attacks. There are reported instances of Canadians who have gained military or combat experience as part of 
their membership in LH and involvement in the Syrian conflict. 


FAR-RIGHT AND FAR-LEFF GROUPS 


The small number of groups and individuals that constitute the far-right movement in Canada espouse an 
array of extremist views and only a few espouse the use of violence in support of their goals. 


Similarly, there is a broad spectrum of issues and groups on the far left, and some individuals support the use 
of violence to achieve their goals. These activists have perpetrated and claimed violent acts including 
vandalism, such as damaging oil and gas pipelines, using incendiary device attacks against symbols of 
capitalist wealth and finance, or taking action to confront the far-right movement. 


—_ INCEL MOVEMENT 
Recruitment & online incitement 
Both far-right and far-left groups use various methods to convey 
their ideas. While some individuals gather in person, both 
movements exist largely online, where they post hate messages 
and/or share views, according to open sources. 


According to open sources from July 2018, individuals in Canada 

who are associated with the far-right movement communicate 

with likeminded actors abroad online, using both social media The 

and memes as. a) recruitment tool to propagate their views. Incel movement has a manifesto; past 

Further, according to open sources, some far-right extremist occurrences, such as the Toronto 

groups in Canada are rebranding and reaching out to other vehicule ramming attack of April 2018, 

groups in the country in an attempt to merge into a larger group. the Florida yoga studio incident of 
November 2018, could be considered 
politically or ideologically motivated. 


According to open sources, while discreet in public, far-left extremists have a strong online presence, and 
activists tend to converse with likeminded individuals in Canada and abroad via online platforms and websites 
such as Contra Info. These forums are also used as mobilization platforms. 


TA 18/231-Corrected / Page 5 of 15 SECRET 


Training 

According to open sources, a small number of individuals espousing far-right extremist ideologies undergo 
private paramilitary training, while others are joining law enforcement or the CAF in order to gain access to 
training and weaponry. 
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While open sources from 2017 previously reported that Sikh extremist groups may have conducted training 
exercises in Canada, 
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5. CANADIAN EXTREMIST TRAVELLERS 
AND PREVENTED TRAVELLERS 


INTENT 


Travel abroad 


Travel to Canada 

Despite Coalition successes against DAESH in Syria and Iraq, 
Canada has not experienced an influx of returning DAESH- 
affiliated CETs and, according to open sources, only a limited 
number have expressed intent to return to Canada, 


Acquisition 


Training 
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t RELATED LEGAL PROCEEDINGS | 


Abdulrahman El BAHNASAWY: 

Pleaded guilty to terrorism-related 
charges in New York, on 2017 10 

06: His’Sentencing is scheduled to 
take place in December 2018. 


Alexandre BISSONNETTE: 
Pleaded guilty to all charges against 
him on 2018 03 28: His sentence 
hearing took place in June 2018. 
and the judge will render his 
sentence in February 2019. 
Bissonnette did not face terrorism 
charges for the Québec City 
mosque shooting. 


Rehab DUGHMOSH: Facing 
terrorism charges, among others, 
Dughmosh is scheduled to stand 
trial starting in January 2019. 


Amor FTOUHI: Convicted of 
terrorism and other crimes on 2018 
11 13 in the 2017 06 21 stabbing of 
an airport officer at the Flint Bishop 
International Airport in Flint, 
Michigan. His sentence hearing is 
scheduled for December 2018. 


Alek MINASSIAN: Facing ten 
counts of first-degree murder and 
16 counts of attempted murder in 
connection with the 2018 04 23 
Toronto van incident. The case is 
going directly to trial. No date has 
yet been set. Minassian is not 
facing terrorism charges. 


Awso PESHDARY: Facing charges 
of participating in the activity of a 
terrorist group, facilitating an activity 
for a terrorist group, and two counts 
of conspiring to participate or 
contribute to an activity of a terrorist 
group with local men, his trial is 
underway. 


Abdulahi Hasan SHARIF: Facing 

12 charges, his trial was set to start 
in May 2018, but was adjourned to 

2019 10 15 to allow for him time to 

find a new lawyer. 
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(including government facilities or infrastructure). 
REALIZED ATTACKS 


DAESH’s diminishing presence in Syria as a result of 
coalition success; the absence of major responses to 
calls for attacks by prominent terrorist leaders; and 
authorities counter terrorism capabilities in many 
countries are contributing factors in this decrease in 
attacks. 


Terrorist methods have shifted from complex directed 
attacks to simple attacks inspired by a group's 
ideology or another individual’s, recent actions. There 
has also been an increase over the past year in violent 
criminal attacks which have appropriated terrorist 
methods (see use of terrorism tactics textbox) 


METHODS 
USED BY ACTORS 


UNSOPHISTICATED METHODS 

Vehicle ramming, — ‘a series of high-profile ramming 
attacks, over the past, years. has demonstrated the 
efficacy. of this terrorist tactic. This method is often 
echoed in DAESH propaganda, especially leading up to 
large special events such as the 2018 FIFA World Cup. 
This tactic has <also’ proven effective in non-terrorism- 
related incidents, such as the Toronto incident of April 
2018 and a September 2018 ‘incident in. Hengyang, 
China, where a man drove an SUV into a group of 
people and then began attacking them with a knife and 
a shovel. 


SECRET 


When extremist intent and capability intersect, a situational opportunity is the only remaining ingredient required 
to realize a terrorist attack. While actors with unsophisticated capabilities may be limited to softer targets, such as 
unsecured public areas or public transit, using readily available weapons, actors that acquire more sophisticated 
capabilities will seek to attack harder targets, such as highly secured special events and secured buildings 


In fact, there have been no terrorist acts perpetrated in Canada since the September 2017 Edmonton attack. 
Further, the rate of terrorist attacks in Western countries has continued to diminish over the last year. 


| 
! USE OF TERRORISM TACTICS 
IN NON TERRORIST ATTACKS 


Source: CBC News 


In April 2018, an individual rented a van and 
killed 10 people and injured 15 after he drove into 
a number of pedestrians in the North York area of 
Toronto. In early April 2018 a man with a history 
of mental illness killed three people in Munster, 
Germany after he rammed a van into a crowd 
outside a restaurant. In December 2017, a car 
plowed into Christmas shoppers in Melbourne, 
Australia, killing one and injuring at least 18. The 
driver, an Australian citizen of Afghan descent, 
had a history of mental health problems and drug 
use. 
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Bladed weapon attacks —DAESH reiterated a call to carry out knife 
attacks on 2018 07 12, a call that has resonated in online forums.as 
well as in concrete action, most recently in Melbourne, Australia, on 
2018 11 09 and Amsterdam, Netherlands on 2018 08 31. , 


. Blunt object attacks — Extremists have heeded DAESH's past calls 


to use readily-available objects as weapons, with individuals using 
implements such as a hammer, in Paris, France, on 2017 06 06, ora 
golf club, in Scarborough, Ontario, on 2017 06 03. 


. Corrosive material attacks — DAESH propaganda dating back to 


September 2017 called on aspiring lone actors to carry out acid 
attacks in the West, suggesting they attack passengers on public 
transport. 


. Exploiting the Internet: extremist propaganda relies on diverse 


open and encrypted tools and platforms, for disseminating ideology 
and methodology related to terrorism. Currently, groups like DAESH 
are placing a significant emphasis on spreading their brand and 
methods in the online» realm. -Canada-based extremists. are 
circulating threatening material online. Though images featuring 
Canada or Canadian interests continue to be used in extremist 
propaganda (see textbox), this has not resulted in increased attacks 
or more active planning in Canada or against. Canadian targets. 


Unmanned aerial vehicles (UAV) — drones span the boundary 
between sophisticated and unsophisticated methods of attack. While 
there have been attacks involving weaponised drones in combat 
zones, in Canada or other Western countries, UAVs continue to be 
used for surveillance and counter-intelligence objectives, and for 
disrupting civil aviation. 


CATION BAC TLIM OS 
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CANADA FEATURED IN 
PROPAGANDA 


DANFORTH Incident 


Source: SITE Intelligence 


Canada continues to be featured in 
extremist propaganda. On 2018 07 
22, an individual opened fire on 
various restaurant patrons on 
Danforth Avenue, a busy 
neighbourhood in Toronto, Ontario, 
killing three people. On 2018 07 25, 
DAESH claimed responsibility for the 
attack and described the shooter as 
"a soldier of the Islamic State" and 
said that he had "carried out the 
attack in response to DAESH's calls 
to target the citizens of the countries 
participating in the anti-DAESH 
coalition." Muharir al-Ansar, a 
DAESH-affiliated media outlet later 
urged lone actors to follow the 
example of the Toronto shooter and 
mount attacks in Western countries. 


UAVs — According to open sources, while domestic actors also discussed the use of UAVs as a possible crude 
explosive delivery system, modified UAVs with enhanced capabilities have been used in theatre in Syria and Iraq 


Improvised explosive devices (IED) — IED attacks remain a benchmark method for terrorists. Even though a 
multitude of. instructions and manuals; are shared and researched online, the construction and successful 
detonation of stable IEDs remains a technical challenge for less-capable actors. 


Vehicle-borne IEDs (VBIED) and IEDs with flammable enhancements - are among the more sophisticated 
IEDs and are therefore more challenging to produce and for successful use in attacks. While not specifically a 
VBIED, an individual loaded a vehicle with flammable gas containers in Melbourne, Australia on 2018 11 09. 
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Advanced Cyber Hacking - Extremist groups such as 
DAESH, AQ, Hizballah, and Hamas continue to pose only a 
minor cyber threat to Canada, since their main focus is still 
kinetic, real-world acts of violence. 


Chemical Biological Radiological Nuclear Explosives 
(CBRNE) - Terrorist groups continue to be interested in using 
chemical and biological agents to conduct attacks, and 
encourage lone actors to use these agents as weapons, 
according to open sources. Manuals and instructions are 
regularly shared online. Credible ricin instructions have been 
posted online throughout 2017 and 2018 and materials that 
tested positive for ricin were found in a disrupted attack in 
Germany in June 2018. Authorities in France arrested an 
individual in May 2018 who was trying to learn how to make 
ricin online. Also, the military-focused jihadi group al-Saqra 
Foundation for Military Science published a “Kill Them 
Silently” series in July 2018, providing various guides and 
manuals on the use of toxins, poisons, and chemicals. There 
is a high level of difficulty in using chemical and biological 
weapons. Their use requires sophistication and detailed 
planning that would be challenging for a lone actor to 
achieve. 
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CALLS FOR CBRN ATTACKS 
IN. THE WEST | 


Source: SITE Intelligence 


Following the release of a video in late 
July 2018 that urged lone-actor jihadists to 
carry out biological weapon attacks in the 
West, al-Abd al-Faqir Media, a DAESH- 
linked media group, issued a poster 
campaign promoting the idea. The 
graphics showed various aspects of 
hypothetical attacks, including a fighter in 
a hazmat suit, nefarious canisters of green 
gas, and the results of such an attack 
depicted in a graphically rendered small 
town. Threatening text included: “The 
Silent Terror Has Just Begun,” “We Will 
Make You Fear the Air You Breath,” and 
“You Will See the Danger of Your 
Weapons in Your Own Country.” None of 
the posters clearly depicted Canada. 


me for 


TA 18/231-Corrected / Page 10 of 15 SECRET 


TARGETS 


1. 


Uniformed Personnel - remain a primary target for extremist attacks, as seen in previous attacks in Canada (the 
September 2017 attack in Edmonton, Alberta; the Toronto, Ontario, Canadian Forces recruitment centre attack in 
March 2016, the October 2014 attacks in Saint-Jean-sur-Richelieu, Quebec and Ottawa, Ontario). Internationally, 
uniformed personnel have frequently been targeted, including the 2018 08 14 attempted vehicule ramming incident 
in London, UK and, the 2018 05 29 attack against police officers in Liege, Belgium. 


. Special Events: Large events such as the Jeux de la Francophonie to be held in Canada in 2021 or the FIFA 


2026 to be held in the USA, Mexico, and Canada will continue to represent a highly attractive targets for extremists. 
Propaganda messages and posters often feature special events, and are typically issued in multiple languages, 
invoking images of logos, venues, and public figures, with text encouraging attacks on civilians in the streets using 
bombs, vehicles, firearms, or knives according to open sources. Western holidays and religious celebrations also 
continue to be featured in extremist threat reporting. Attacks against such targets continue to occur, as seen on 
2018 11 02 when gunmen opened fire on two buses carrying Coptic Christians in Minya province, Egypt, killing 
seven and wounding eighteen. 


. Soft Target Public Spaces — extremist groups continue to promote attacks against public spaces with a high 


concentration of individuals or high foot traffic and fluid movement of people. For example, the pro-DAESH Remah 
Media Foundation published a poster on Telegram on 2018 10 04, displaying a stock image of a concert and 
showing a man holding a knife behind his back. Another DAESH-supporting group, al-Abd al-Faqir Media 
Foundation had published a similar poster on 2018 09 26, also showing a stock image of a concert, but featuring a 
man holding a grenade. Other public spaces of symbolic value, including churches, mosques, synagogues, and 
community centres can also represent attractive targets for extreme groups. 


Secured Hard Targets — As actors acquire more sophisticated capabilities, harder targets, such as highly secured 
special events or secured government facilities and areas may become more attainable targets. However, 
domestically, these type of venues remain aspirational at this time. 


TRANSPORTATION SECTORS 
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TERRORISM THREAT LEVELS 
Il For transportation 


An attack on an aviation target, airplanes in particular, continue to represent a pinnacle of achievement for groups 
such as DAESH and AQ. Plots and attack attempts against aviation continue to be featured in extremist propaganda, 
according to open sources. Al-Abd al-Faqir Media, a DAESH-linked group, published a poster threatening civil 
aviation, giving a warning in Arabic, English, and French. The group distributed the image on Telegram on 2018 04 25, 
which depicts a scene from the fuselage of an aircraft and features a passenger holding a knife. The text displayed in 
the three languages reads: "You will be an easy prey". 
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According to open sources, on 2018 08 09, DAESH supporters on the Shumukh al-Islam pro- 
DAESH Deep Web torum discussed operational advice to target maritime transportation. The discussion involved 
suggestions to target oil tankers, military craft, cargo ships or cruise liners using tactics similar to those used in the 
bombing of USS Cole in Yemen by AQ in 2000. Canada was not mentioned in this discussion. 


TERRORISM THREAT LEVELS 
I! For Canada 
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ee An act of terrorism COULD OCCUR. 


ITAC assesses 
that an act of terrorism could occur in Canada. 
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THREAT LEVEL // DEFINITIONS ~ Established Raised + Lowered $? Remains 


PGA UTTAR NG OA AT AREOLA LE DEES EI POLAT NEI TD TROLS TINSEL OA EI LD SALTED OCT 


RRS MAGI LEVER LE PC OTIC ENED TREE EL EDEL LM OSE, 
ITAC assesses thal a violent act ofterrorism is 
CRITICAL HIGHLY LIKELY and 
COULD OCCUR IMMINENTLY. 


ITAC assesses. that a violent act of terrorism is 
HIGH LIKELY 
MEDIUM ITAC assesses that a violent act of terrorism 


COULD OCCUR 


ITAC assesses that a violent act of terrorism is 
LOW POSSIBLE BUT UNLIKELY 


YE OW ITAC assesses that a violent act of terrorism is 
+ HIGHLY UNLIKELY 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 


HANDLING INSTRUCTIONS 


This document is the property of the Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived from various 
sources with information effective as of the date of publication. It is provided to your agency/department in confidence and may be 
further disseminated by your agency/department to those with appropriate security clearances and appropriate security systems to 
retain the information. It must-not be reclassified or reused in any way, in whole or in part, without the consent of the originator. 


Any feedback should be directed via ! email to: 
Internal Users: // External, Users: 


This document constitutes a record which may: be subject to mandatory exemption under the Access to Information Act or the Privacy 
Act. The information or intelligence may also be protected by the provisions of the Canada Evidence Act. The information or 
intelligence must not.be disclosed or used as evidence without-prior consultation with ITAC. 
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Violent right-wing extremism in Canada and Europe -a 
comparative analysis 


INTRODUCTION 


On 2017 01 29, Alexandre Bissonnette, an individual reported to be supportive of right-wing extremist (RWE) 
views, conducted a fatal attack at a mosque in Québec City. Bissonnette is charged with six counts of first-degree 
murder and six counts of attempted murder using a restricted firearm, and will stand trial beginning March 2018. A 
year out from the Québec attack, this paper considers the threat posed by RWE individuals and groups in Canada 
who go beyond freedom of expression and the right to protest, and beyond criminal acts of hatred, to conduct acts 
of terrorism inspired by RWE ideology. The paper compares this threat to that posed by individuals and groups in 
Europe, where a number of violent RWE attacks have occurred in recent years. 


= — 


The RWE milieu comprises a complex and diverse range of |! . | 
individuals and groups espousing views on a number of issues RWE groups in Canada 
and grievances, including white supremacy, anti-Semitism, anti- 
Islam, anti-immigration, homophobia, anti-government, anti-law 
enforcement and racism, among others. RWEs use various means 
to express their views. In Canada, activities short of promoting 
violence are protected by The Canadian Charter of Rights and 
Freedoms, which guarantees the rights of freedom of conscience 
and religion, freedom of thought, belief, opinion and expression, 
freedom of peaceful assembly and freedom of association. 


RWE activities that cross the criminal threshold are defined as 
“hate crimes” if they are found to be motivated by hatred toward an 
identifiable group as defined in 718.2(a)(i) of the Criminal Code of 
Canada. In order for activity to be deemed an act of terror, a 
further specifier is required with respect to motivation, namely 
being done with the intention of intimidating the public or a segment of the public, with regard to its security or 
compelling a person, a government, or a domestic or an international organization to do or to refrain from doing any 
act (section 83.01 of the Criminal Code). Violent activities by RWE individuals or groups in Canada over recent 
years have not, as far as the ITAC is aware, been identified as having legally crossed the threshold to terrorist 
activity. 


Source: Vice News 


KEY JUDGEMENTS 


Canada’s RWE milieu espouse the use of violence 
in support of their goals. 


ASSESSMENT NOTE 
This report is based on open source information and intelligence. 


DEFINITIONS and HANDLING INSTRUCTIONS are located at the last page. C at 
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The European context 

The RWE milieu in Europe is grounded in anti-immigration, 
anti-Islam, anti-European Union and anti-Semitic stances, 
according to open sources. The recent influx of migrants to 
Europe caused by the Syrian conflict has also been used 
by RWE groups to promote xenophobic and Islamophobic 
positions, according to an EU trend report. 


These strong nationalist ideologies have been boosted by 
some political parties that have recently become prominent 
throughout Europe. In December 2017, Austria became the 
only western European state with a ruling far-right party in 
government with the coalition between the far-right 
Freedom Party and the conservative People’s Party. Far- 
right ideology in Europe has also seen political 
legitimization in the rise of the ‘Alternative fur Deutschland’ 
(AfD) party in Germany and the ‘Front National’ in France. 
The March 2016 election marked the first time in more than 
60 years that a far-right party sat in the federal parliament 
in Germany, while France’s far-right leader Marine Le Pen 
contested the 2017 French presidential election and 
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RWE threat to politicians in Europe 


November 2017 — Andreas Hollstein, the mayor of the 
westem German town of Altena, was attacked by a 
man wielding a 30 centimetre-long knife who was 
shouting criticisms of Hollstein’s liberal policy towards 
asylum seekers. 


July 2016 — British Labour Party Member of Parliament 
(MP) Jo Cox was shot and stabbed to death by 
Thomas Mair during the EU referendum campaign. Cox 
was a vocal advocate for Britain to remain in the EU. 
Mair was sentenced to serve a whole-life sentence due 
to the exceptional seriousness of the offence, as the 
court believed Cox’s murder was committed to advance 
a cause associated with Nazism. 


October 2015 — Mayoral candidate Henriette Reker 
was stabbed as she campaigned in Cologne's election. 
Reker was campaigning on her support for Germany's 
“open-door’ refugee policy and her attacker confessed 
to having xenophobic motives and links to the far-right 


attained almost 34 percent of the national vote in the movement in Germany. 


second round. 


While Europe has seen the legitimate emergence of far right-wing political parties, there are also many RWE 
groups throughout Europe that espouse violent rhetoric. Open source reporting indicates that this segment of the 
European RWE milieu is fragmented, lacks consistent organization and leadership, and suffers from internal 
conflict, meaning that violent RWE attacks are primarily carried out by individuals, or loosely coordinated networks 
or groups. Some recent examples of RWE violence in Europe include: 


+ Three members of the Nordic Resistance Movement were sentenced in July 2017 for attacks in southern 
Sweden targeting newly arrived migrants. The three were responsible for an unexploded device found near a 
campsite accommodating migrants and a bomb that seriously injured one person in January 2017. The 
members were convicted on a range of counts, including attempted murder. 

* Darren Osborne drove a rented van into worshippers leaving evening prayers at the Finsbury Park Mosque in 

north London on 2017 06 19, killing one and injuring 11 others. Osborne was convicted of terrorism-related 
murder and attempted murder. A letter found in the van, which was believed to have been written by 
Osborne, contained a lengthy diatribe with strong racial and political overtones, opposing the presence of 
Muslims and migrants. 
In July 2011, Anders Breivik detonated a bomb outside the Parliament building in Oslo, Norway, killing eight 
people. He then shot dead 69 people, mostly teenagers, at a summer youth camp on the island of Utoya. He 
had posted white supremacist and anti-Muslim material online and had sent a 1,500-page manifesto the day 
he committed the attacks. 


European governments have been working to curb the spread of violent RWE groups. According to media 
reporting, in September 2017 and January 2018, British authorities arrested and charged several individuals under 
anti-terror laws for associating with the proscribed RWE group ‘National Action’. In 2016, ‘National Action’ became 
the first British RWE organization to be banned for promoting violence and acts of terrorism. Additionally, in 
November 2017, Finnish courts banned the Nordic Resistance Movement. The group, with roots in Sweden, 
attacked LGBTQ events, clashed with anti-racist demonstrators and carried out bomb attacks on refugee centres. 


1 ITAC notes that the definition for terrorism as it relates to right-wing extremism differs across European countries. 
That said, given the varying legislation, ITAC assumes that the legal threshold for terrorism-related charges have 
been met in each jurisdiction. 


a 


* 
ITAC jos 


TA 18/39-E / Page 3 of 5 


ASSESSMENTS 


The Canadian Context 


Right-wing extremism has been described as “encompassing a 
large, loose, heterogeneous collection of groups and individuals 
espousing a wide range of grievances and positions, including: 
anti-government/individual sovereignty, racism, fascism, white 
supremacy/white nationalism, anti-Semitism,  nativism/anti- 
immigration, anti-globalization/anti-free trade, anti-abortion, 
homophobia, anti-taxation, and pro-militia/pro-gun rights stances.” 
In Canada, a complex and diverse range of groups and individuals 
espouse many of these positions. 


According to research by Dr. Barbara Perry and Ryan Scrivens, 
Canadian academics who study right-wing extremism, historically 
Canada’s immigration policy and legislation, as well as economic 
fluctuations, i.e. periods of higher unemployment and inflation 
rates, have influenced the RWE milieu in Canada. Scrivens 
argues that Canada’s acceptance of refugees in 2015 in the wake 
of the Syrian civil war and emergence of DAESH in Syria and Iraq, 
has contributed to increasing momentum in right-wing extremism. 
Scrivens also assessed that the November 2016 US election of a 
presidential candidate who campaigned on right-wing populist and 
white nationalist issues helped galvanize Canada’s extant white 
supremacist ideologies, identities, movements and practices. 
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Hate crimes in Canada 


Police reported violent crimes (e.g. assault, 
threats, criminal harassment) in Canada — 
2016: 

e Hate crimes were up by 3% from 2015 
to 2016, but below the number reported 
in 2009, the year comparable data 
became available 

e Hate crimes represent less than 0.1% of 
crimes (excluding traffic violations) 

e Hate crimes targeting South Asians and 
Arabs or West Asians, Jewish 
population, sexual orientation, were on 
the rise 

e Hate crimes declined against Muslims in 
2016 

e Increased violence in hate crimes in 
2016. 

e Hate crimes targeting sexual orientation 
continued to be the most violent hate 
crimes. 

Source: Police-reported hate crime, 2016 

Statistics Canada 


According to Perry and Scrivens, as of mid-2015 there were at least 100 ‘far-right’ groups operating in the country, 
with a wide range of views and membership numbers. In a description of right-wing extremism in Canada, the 
RCMP includes white supremacist, nationalist, neo-Nazi, xenophobic and racist groups. Perry also suggests that, 
in the recent past, an increasing number of people are engaging with the RWE movement online. 


Right-wing extremism in Canada exists primarily, though not exclusively, on the Internet, with members of some 
groups meeting in person. It should be noted that, as in Europe, some individuals associated with far-right ideology 
have had connections to Canadian politics — a number of candidates in Ontario municipal elections in 2014, for 
example. However, the electoral success of such individuals remains limited in Canada. 


RWE groups in Canada use various methods to convey their views; for example, staging protest actions or 
expressing hate online. 
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Canadian RWEs engage in threatening activities targeting specific individuals or groups, including refugees, which 
may fall under the definition of “hate crime” under the Criminal Code of Canada. 


, some 
examples of acts of serious violence include: 


* On 2017 01 29, 27-year-old Alexandre Bissonnette shot attendees inside the Grande Mosquée de Québec, 
in Québec City. Six people were killed and 19 injured. On the anniversary of the attack, Canada’s Prime 
Minister issued a statement describing the event as a “terrorist attack against all Canadians, meant to test 
our resolve and weaken our values,” and voiced the resolve to fight Islamophobia and all forms of hatred and 
discrimination. 


+ In June 2014, 24-year-old Justin Bourque, who had espoused anti-authority, anti-law enforcement views, 
shot five RCMP officers in Moncton, New Brunswick, killing three and seriously injuring two others. 
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THREAT LEVEL # DEFINITIONS Dé Established Raised GLowered Remains 


ITAC assésses that a violent act of terrorism is 


CRITICAL HIGHLY LIKELY and 
COULD OCCUR IMMINENTLY. 


ITAC assesses that a violent act of terrorism is 


HIGH LIKELY. 


A ITAC assesses that a violent act of terrorism 
n Ui 
MEDIUM COULD OCCUR 


ITAC assesses that a violent act of terrorism is 
LOW POSSIBLE BUT UNLIKELY 


UE op = ITAC assesses that a violent act of terrorism is 
= f 
VER : LUN HIGHLY UNLIKELY. 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 
regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 


HANDLING INSTRUCTIONS 


This document is the property of the Integrated Terrorism Assessment Centre (ITAC). Prepared by ITAC, it is derived from various 
sources with information effective as of the date of publication. It is provided to your agency/department in confidence and may be 
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Violent right-wing extremism in Canada and Europe 


INTRODUCTION 

On 2017 01 29, Alexandre Bissonnette, an individual reported to be supportive of right-wing extremist (RWE) 
views, conducted a fatal attack at a mosque in Québec City. Bissonnette is charged with six counts of first-degree 
murder and six counts of attempted murder using a restricted firearm, and will stand trial beginning March 2018. A 
year out from the Québec attack, this paper considers the threat posed by RWE individuals and groups in Canada 
who go beyond freedom of expression and the right to protest, and beyond criminal acts of hatred, to conduct acts 
of terrorism inspired by RWE ideology. The paper compares this threat to that posed by individuals and groups in 
Europe, where a number of violent RWE attacks have occurred in recent years. 


The RWE milieu comprises a complex and diverse range of 
individuals and groups espousing views on a number of issues 
and grievances, including white supremacy, anti-Semitism, anti- 
Islam, anti-immigration, homophobia, anti-government, anti-law i 
enforcement and racism, among others. RWEs use various AP a ie y 
means to express their views. In Canada, activities short of j 
promoting violence are protected by The Canadian Charter of 
Rights and Freedoms, which guarantees the rights of freedom of 
conscience and religion, freedom of thought, belief, opinion and 
expression, freedom of peaceful assembly and freedom of 
association. 


RWE groups in Canada 


RWE activities that cross the criminal threshold are defined as 
“hate crimes” if they are found to be motivated by hatred toward 
an identifiable group as defined in 718.2(a)(i) of the Criminal 
Code of Canada. In order for activity to be deemed an act of terror, a further specifier is required with respect to 
motivation, namely being done with the intention of intimidating the public or a segment of the public, with regard to 
its security or compelling a person, a government, or a domestic or an international organization to do or to refrain 
from doing any act (section 83.01 of the Criminal Code). 


KEY JUDGEMENTS 
* Canada’s RWE milieu espouse the use of 
violence in support of their goals. 


Source: Vice News 


The European context 


The RWE milieu in Europe is grounded in anti-immigration, anti-Islam, anti-European Union and anti-Semitic 
stances, according to open sources. The recent influx of migrants to Europe caused by the Syrian conflict has also 
been used by RWE groups to promote xenophobic and Islamophobic positions, according to an EU trend report. 
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There are many RWE groups throughout Europe that espouse violent rhetoric. Open source reporting indicates 
that this segment of the European RWE milieu is fragmented, lacks consistent organization and leadership, and 
suffers from internal conflict, meaning that violent RWE attacks are primarily carried out by individuals, or loosely 


coordinated networks or groups. Some recent examples of RWE violence in Europe include: 


+ Three members of the Nordic Resistance Movement 
were sentenced in July 2017 for attacks in southern 
Sweden targeting newly arrived migrants. The three 
were responsible for an unexploded device found 
near a campsite accommodating migrants and a 
bomb that seriously injured one person in January 
2017. The members were convicted on a range of 
counts, including attempted murder. 


+ Darren Osborne drove a rented van into worshippers 
leaving evening prayers at the Finsbury Park 
Mosque in north London on 2017 06 19, killing one 
and injuring 11 others. Osborne was convicted of 
terrorism-related murder’ and attempted murder. 


e In July 2011, Anders Breivik detonated a bomb 
outside the Parliament building in Oslo, Norway, 
killing eight people. He then shot dead 69 people, 
mostly teenagers, at a summer youth camp on the 
island of Utoya. He had posted white supremacist 
and anti-Muslim material online and had sent a 
1,500-page manifesto the day he committed the 
attacks. 


European governments have been working to curb the 
spread of violent RWE groups. According to media 
reporting, in September 2017 and January 2018, British 
authorities arrested and charged several individuals under 
anti-terror laws for associating with the proscribed RWE 
group ‘National Action’. In 2016, ‘National Action’ became 
the first British RWE organization to be banned for 
promoting violence and acts of terrorism. Additionally, in 
November 2017, Finnish courts banned the Nordic 
Resistance Movement. The group, with roots in Sweden, 
attacked LGBTQ events, clashed with anti-racist 
demonstrators and carried out bomb attacks on refugee 
centres. 


ASSESSMENT 


The Canadian Context 


RWE threat to politicians in Europe | 


November 2017 — Andreas Hollstein, the mayor of the 
westem German town of Altena, was attacked by a 
man wielding a 30 centimetre-long knife who was 
shouting criticisms of Hollstein’s liberal policy towards 
asylum seekers. | 


July 2016 — British Labour Party Member of Parliament 
(MP) Jo Cox was shot and stabbed to death by 
Thomas Mair during the EU referendum campaign. Cox 
was a vocal advocate for Britain to remain in the EU. 
Mair was sentenced to serve a whole-life sentence due 
to the exceptional seriousness of the offence, as the 
court believed Cox’s murder was committed to advance 
a cause associated with Nazism. 


October 2015 — Mayoral candidate Henriette Reker 
was Stabbed as she campaigned in Cologne’s election. 
Reker was campaigning on her support for Germany's 
“open-door’ refugee policy and her attacker confessed 
to having xenophobic motives and links to the far-right 
movement in Germany. 


Hate crimes in Canada i 


Police reported violent crimes (e.g. assault, threats, 

criminal harassment) in Canada — 2016: 

e -Hate crimes were up by 3% from 2015 to 2016, 
but below the number reported in 2009, the year 
comparable data became available 

e _ Hate crimes represent less than 0.1% of crimes 
(excluding traffic violations) 

e Hate crimes targeting South Asians and Arabs or 
West Asians, Jewish population, sexual 
orientation, were on the rise 

e Hate crimes declined against Muslims in 2016 

e Increased violence in hate crimes in 2016. 

e Hate crimes targeting sexual orientation 
continued to be the most violent hate crimes. 

Source: Police-reported hate crime, 2016 Statistics 

Canada 


Right-wing extremism has been described as “encompassing a large, loose, heterogeneous collection of groups 
and individuals espousing a wide range of grievances and positions, including: anti-government/individual 
sovereignty, racism, fascism, white supremacy/white nationalism, anti-Semitism, nativism/anti-immigration, anti- 
globalization/anti-free trade, anti-abortion, homophobia, anti-taxation, and pro-militia/pro-gun rights stances.” In 
Canada, a complex and diverse range of groups and individuals espouse many of these positions. 


1 ITAC notes that the definition for terrorism as it relates to right-wing extremism differs across European countries. That said, 
given the varying legislation, ITAC assumes that the legal threshold for terrorism-related charges have been met in each 
jurisdiction. 
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According to research by Dr. Barbara Perry and Ryan Scrivens, Canadian academics who study right-wing 
extremism, historically Canada’s immigration policy and legislation, as well as economic fluctuations, i.e. periods of 
higher unemployment and inflation rates, have influenced the RWE milieu in Canada. Scrivens argues that 
Canada’s acceptance of refugees in 2015 in the wake of the Syrian civil war and emergence of DAESH in Syria 
and Iraq, has contributed to increasing momentum in right-wing extremism. 


According to Perry and Scrivens, as of mid-2015 there were at least 100 ‘far-right’ groups operating in the country, 
with a wide range of views and membership numbers. In a description of right-wing extremism in Canada, the 
RCMP includes white supremacist, nationalist, neo-Nazi, xenophobic and racist groups. Perry.also suggests that, 
in the recent past, an increasing number of people are engaging with the RWE movement online. 


Right-wing extremism in Canada exists primarily, though not exclusively, on the Internet, with members of some 
groups meeting in person. 


RWE groups in Canada use various methods to convey their views; for example, staging protest actions or 
expressing hate online. 


While some Canadian RWE activities may fall under the definition of “hate crime” under the Criminal Code of 
Canada, 


some,examples of acts of serious violence include: 


* On 2017 01 29, 27-year-old Alexandre Bissonnette shot attendees inside the Grande Mosquée de Québec, in 
Québec City. Six people were killed and 19 injured. On the anniversary of the attack, Canada’s Prime Minister 
issued a statement describing the event as a “terrorist attack against all Canadians, meant to test our resolve 
and weaken our values,” and voiced the resolve to fight Islamophobia and all forms of hatred and 
discrimination. 


+ In June 2014, 24-year-old Justin Bourque, who had espoused anti-authority, anti-law enforcement views, shot 
five RCMP officers in Moncton, New Brunswick, killing three and seriously injuring two others. 
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ITAC assesses fhat a violént/act of terrorism is 
HIGHLY LIKELY. and 
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ITAC/assessésthat a violent act of terrorism is 
LIKELY. 


ITAC assesses‘thäta. violent act of terrorism 
COULD OCCUR 


iTAC assesses that a violent act of terrorism is 
POSSIBLE BUT UNLIKELY 


ITAC assesses that a violent act of terrorism is 
HIGHLY UNLIKELY. 


ITAC uses both quantitative and qualitative analysis in applying terrorism threat levels. The setting of threat levels is determined by several factors including current 
intelligence, recent events, as well as the intent, capabilities, and attack frequency of terrorist groups. ITAC cautions that the information may be incomplete and, 


regardless of the threat level applied, a violent act of terrorism may occur with little or no warning. 
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